patent-asset-grading
Warn
Audited by Snyk on Aug 27, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). 该Skill在运行时通过
Eureka AI调用智慧芽MCP并将其返回的Markdown(其中包含标题/摘要/权利要求/法律状态等自由文本)交给parse_patent_markdown()解析并用于评分与输出,因此若智慧芽MCP可被外部用户提交/污染内容则会出现间接提示注入暴露。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata